BuildPoliciesFromEvents create a Policies instance with a single policy, which chooses the given events without filters or scopes.

DiscoverChildProcesses discovers all child processes of a given PID.

ExecCmdBgWithSudoAndCtx executes a command with sudo in the background, and returns the PID of the process and a channel to wait for the command to exit (Check RunningTracee object about how to use this).

ExecPinnedCmdWithTimeout executes a cmd with a timeout and returns the PID of the process.

IsSudoCmdAvailableForThisUser checks if the sudo command is available for the current user.

NewPolicies creates a slice of policies setting the ID of each policy to the given ID.

NewRunningTracee creates a new RunningTracee instance.

ParseCmd parses a command string into a command and arguments.

PinProccessToCPU pins the current process to a specific CPU.

SetTestLogger create a logger which prints the logs to the returned channel.

SudoKillProcess kills a process with sudo.

TestLogs searches for the given logs and test when input channel closes if all logs were received.

CPU to pin test processes to.

RunningTracee is a wrapper for a running tracee process as a regular process.